Identity Impersonation Detection White Paper Read Now
Two ways to verify a caller at the IT help desk. One scans an ID and adds a liveness selfie. The other checks the ID against the DMV that issued it.
Trusona and HYPR both verify a caller at the IT help desk to stop account takeover. HYPR Affirm sends the caller a link by email or SMS to scan a government ID and take a liveness selfie, then reports a NIST IAL2 result in under two minutes. Trusona reads the ID and verifies it against the state DMV that issued it, over the AAMVA network. It runs no selfie and stores no PII.
The caller scans a government ID. Trusona checks it against the state DMV that issued it, over the AAMVA network, and returns the result to the agent in real time. It detects SIM swaps and port-outs, blocks man-in-the-middle attacks, stores no PII, and never asks the caller for a selfie.
HYPR's help desk app lets an agent send a one-time link by email or SMS. The caller scans a government photo ID and takes a certified liveness selfie, and HYPR reports a NIST IAL2 result, usually in under two minutes. Each check is recorded in HYPR's audit trail.
HYPR and Trusona both point at deepfakes, and they answer the threat in opposite ways. HYPR says its liveness check "actively prevents spoofing and deepfake attacks" by confirming that a live person is present and matches the ID. Trusona's position is that a generated face can pass a liveness check, so it never asks for a face. It verifies the ID against the state DMV that issued it. One approach tries to detect a fake face. The other removes the face from the decision.
| Capability | Trusona ATO Protect | HYPR Affirm |
|---|---|---|
| Verifies the ID against the issuing DMV (AAMVA) | Yes | No, authenticates the document and selfie |
| Requires a live selfie or liveness biometric | No selfie | Yes |
| Captures biometric data from the caller | No | Yes, ID scan and selfie |
| Stores no personal data (PII) from the check | Yes | Captures the ID and selfie during the check |
| SIM-swap and port-out detection | Yes | Not published |
| Patented man-in-the-middle and anti-replay detection | Yes (US Pat. 10,601,859) | Not published |
| Reverse check: caller verifies the agent | Yes (Agent Verify) | Not published |
| Returns a result in real time | Yes | Yes, NIST IAL2, typically under 2 minutes |
Comparison based on each company's public product materials as of July 2026, including HYPR's help desk application blog and Affirm documentation. "Not published" means a capability that HYPR does not describe on its public help-desk pages, not confirmation that it is absent.
Six more side-by-side breakdowns of Trusona against the tools teams evaluate for help desk identity verification.